Re: 40G QSFP+ to 4 SFP+ on MX960

[Saku Ytti]

On Fri, 25 Feb 2022 at 01:03, Eric Kuhnke  wrote:

Hey Eric,

I would go as far to say that even if somebody gives you *free* 40G
> equipment in the year 2022 you shouldn't use it, because it's a
> technological dead-end and becomes a huge bother when you need to interface
> with some newly purchased device on the other end of the 40G circuit.
>

Then you went too far. For many users the 40G port is there to increase 10G
density, by offering 4x10GE breakout. It is already difficult to support
1GE customers and 10GE is starting to become problematic. But SP networks
actually have these customers, and not every application on the Internet
will always need more and more capacity, so many of these customers have no
requirement to ever purchase faster ports.

If you live in cloudyworld, sure, denser and faster. But this mode of
thinking is making life at SP networks rather difficult.


-- 
  ++ytti

Re: Russian aligned ASNs?

[scott]

There were questions in the media about cutting off the Internet.


One brief update not from the media.  My Russian friend just called her 
Russian friend in Russia who just finished talking to a friend in 
Ukraine that said the cell phones and internet are up.


scott

Re: Russian aligned ASNs?

[Lady Benjamin Cannon of Glencoe]

-LB

Ms. Lady Benjamin PD Cannon of Glencoe, ASCE
6x7 Networks & 6x7 Telecom, LLC 
CEO 
b...@6by7.net
"The only fully end-to-end encrypted global telecommunications company in the 
world.”
ANNOUNCING: 6x7 GLOBAL MARITIME 

FCC License KJ6FJJ




> On Feb 24, 2022, at 7:48 PM, Lady Benjamin Cannon of Glencoe  
> wrote:
> 
> My personal opinion is that the best thing for democracy and the world in 
> general is to keep the flow of information moving.  Coordinate with your 
> contacts in DHS/CISA/etc. 
> 
> I have friends and loved ones affected, I know many here do as well. Godspeed 
> everyone.
> 
> -LB
> 
> Ms. Lady Benjamin PD Cannon of Glencoe, ASCE
> 6x7 Networks & 6x7 Telecom, LLC 
> CEO 
> b...@6by7.net 
> "The only fully end-to-end encrypted global telecommunications company in the 
> world.”
> ANNOUNCING: 6x7 GLOBAL MARITIME 
> 
> FCC License KJ6FJJ
> 
> 
> 
> 
>> On Feb 24, 2022, at 4:40 PM, William Allen Simpson 
>> mailto:william.allen.simp...@gmail.com>> 
>> wrote:
>> 
>> There have been reports of DDoS and new targeted malware attacks.
>> 
>> There were questions in the media about cutting off the Internet.
>> 
>> Apparently some Russian government sites have already cut themselves
>> off, presumably to avoid counterattacks.
>> 
>> Would it improve Internet health to refuse Russian ASN announcements?
>> 
>> What is our community doing to assist Ukraine against these attacks?
> 

Re: BANDWIDTH and VONAGE lose FCC rules exemption for STIR/SHAKEN

[Matthew Petach]

What made my otherwise-largely-quiescent phone go
berserk was joining AARP.

Went from weeks between random telemarketing call to
now getting sometimes more than 100 calls before
lunchtime.  Today, I couldn't hang up on one person
offering me Medicare benefits fast enough before
another was already beeping on call waiting.  :/

Moral of the story?

If you retire and join AARP, put your most hated
enemy's phone number down instead of yours.  :(

Matt


On Thu, Feb 24, 2022 at 7:28 PM Tom Mitchell 
wrote:

> I've seen an uptick, but nothing too dramatic.  Maybe 4-5 junk calls a day
> - mostly afternoon.
>
> -- Tom
>
>
> On Sun, Feb 20, 2022 at 9:57 AM Josh Luthman 
> wrote:
>
>> Mine exploded since the requirement date.  Some mornings I get a dozen
>> before lunch.
>>
>> On Fri, Feb 18, 2022 at 2:33 PM Michael Thomas  wrote:
>>
>>>
>>> On 2/17/22 11:58 AM, Sean Donelan wrote:
>>> >
>>> >
>>> https://www.fcc.gov/document/fcc-finds-two-providers-failed-fully-implement-stirshaken-0
>>> >
>>> >
>>> > The Federal Communications Commission today took action to ensure that
>>> > voice service providers meet their commitments and obligations to
>>> > implement STIR/SHAKEN standards to combat spoofed robocall scams.
>>> > Specifically, voice service providers Bandwidth and Vonage lost a
>>> > partial exemption from STIR/SHAKEN because they failed to meet
>>> > STIR/SHAKEN implementation commitments and have been referred to the
>>> > FCC’s Enforcement Bureau for further investigation.
>>>
>>>
>>> So for probably a year or so before the Stir/Shaken mandate came, I have
>>> been seeing a lot less phone spam. I don't know if that's typical but it
>>> was quite noticeable for me. What that tells me is that providers likely
>>> started clamping down on their shady customers well ahead of the mandate
>>> which says that regulatory fiat would have been sufficient too. But that
>>> hinges on whether my situation is typical though.
>>>
>>> Mike
>>>
>>>

Re: Russian aligned ASNs?

[scott]

On 2/24/2022 2:40 PM, William Allen Simpson wrote:

There have been reports of DDoS and new targeted malware attacks.

There were questions in the media about cutting off the Internet.

Apparently some Russian government sites have already cut themselves
off, presumably to avoid counterattacks.

Would it improve Internet health to refuse Russian ASN announcements?

What is our community doing to assist Ukraine against these attacks?





I think everyone should keep all networks up and functional as long as 
possible and let information flow.


The big issue, of course, will be the filling of the media with so much 
crap that no one knows what to believe.  Apparently, they are attacking 
the Ukraine government.  Regular people that are not being targeted, 
except for those unfortunate folks that are 'collateral damage".  
Russian and Ukraine folks are family and friends for the most part.  No 
one on either side wants to see each other targeted.


AFAIK, cell phones and internet in Ukraine are working.  Someone I know 
called their friend in Ukraine who was on a cell.  That person said 
Ukrainians generally are scared, but not panicking. Good call.


scott

Contact for VA.gov

[Pete Woods]

Does anyone on the list happen to have a contact for a network or DNS
contact at VA.gov? Off-list response is greatly appreciated. Many thanks in
advance.

-- 
Pete Woods

Director of DevOps

DNSFilter.com

*USA Pacific Standard Timezone*

Re: New minimum speed for US broadband connections

[Tom Mitchell]

Go Mike!

Seriously, Like Owen, I'm in Evergreen and until recently, my home had very
poor speeds, but at least something.  Today, I have no option other than
Comcast which has jumped to mediocre, and AT&T's DSL.  Seriously. I also
get better service in the Sierra's, but alas, still only one choice.

-- Tom


On Wed, Feb 16, 2022 at 4:52 PM Mike Lyon  wrote:

> If they allow antennas on the roof, we can service them :)
>
> Your house, on the other hand, we already lucked out on that one!
>
> -Mike Lyon
> Ridge Wireless
>
> On Feb 16, 2022, at 16:48, Matthew Petach  wrote:
>
> 
>
>
> On Wed, Feb 16, 2022 at 1:16 PM Josh Luthman 
> wrote:
>
>> I'll once again please ask for specific examples as I continue to see the
>> generic "it isn't in some parts of San Jose".
>>
>
>
> You want a specific example?
>
> Friend of mine asked me to help them get better Internet connectivity a
> few weeks ago.
>
> They live here:
>
> https://www.google.com/maps/place/Meridian+Woods+Condos/@37.3200394,-121.9792261,17.47z/data=!4m5!3m4!1s0x808fca909a8f5605:0x399cdd468d99300c!8m2!3d37.3190694!4d-121.9818295
>
> Just off of I-280 in the heart of San Jose.
>
> I dug and dug, and called different companies.
> The only service they can get there is the 768K DSL service they already
> have with AT&T.
>
> Go ahead.  Try it for yourself.
>
> See what service you can order to those condos.
>
> Heart of Silicon Valley.
>
> Worse connectivity than many rural areas.   :(
>
> Matt
>
>
>

Re: BANDWIDTH and VONAGE lose FCC rules exemption for STIR/SHAKEN

[Tom Mitchell]

I've seen an uptick, but nothing too dramatic.  Maybe 4-5 junk calls a day
- mostly afternoon.

-- Tom


On Sun, Feb 20, 2022 at 9:57 AM Josh Luthman 
wrote:

> Mine exploded since the requirement date.  Some mornings I get a dozen
> before lunch.
>
> On Fri, Feb 18, 2022 at 2:33 PM Michael Thomas  wrote:
>
>>
>> On 2/17/22 11:58 AM, Sean Donelan wrote:
>> >
>> >
>> https://www.fcc.gov/document/fcc-finds-two-providers-failed-fully-implement-stirshaken-0
>> >
>> >
>> > The Federal Communications Commission today took action to ensure that
>> > voice service providers meet their commitments and obligations to
>> > implement STIR/SHAKEN standards to combat spoofed robocall scams.
>> > Specifically, voice service providers Bandwidth and Vonage lost a
>> > partial exemption from STIR/SHAKEN because they failed to meet
>> > STIR/SHAKEN implementation commitments and have been referred to the
>> > FCC’s Enforcement Bureau for further investigation.
>>
>>
>> So for probably a year or so before the Stir/Shaken mandate came, I have
>> been seeing a lot less phone spam. I don't know if that's typical but it
>> was quite noticeable for me. What that tells me is that providers likely
>> started clamping down on their shady customers well ahead of the mandate
>> which says that regulatory fiat would have been sufficient too. But that
>> hinges on whether my situation is typical though.
>>
>> Mike
>>
>>

RE: 40G QSFP+ to 4 SFP+ on MX960

[Trent via NANOG]

Hi,

 

Not all MPCs support breakouts. You can check on the ability with of the PIC 
and what speeds it can breakout.

 

show chassis pic fpc-slot  pic-slot 

 

Output on a MPC7E-MRATE will show the following. For example, while the 
MPC7E-MRATE supports 4x10 breakouts, it doesn’t support 4x25 on a 100G capable 
port.

 

mx> show chassis pic fpc-slot 4 pic-slot 0 | find "Port speed information" 

Port speed information:

 

  Port  PFE  Capable Port Speeds

  0  0   4x10GE, 40GE

  1  0   4x10GE, 40GE

  2  0   4x10GE, 40GE, 100GE

  3  0   4x10GE, 40GE

  4  0   4x10GE, 40GE

  5  0   4x10GE, 40GE, 100GE

 

{master}

mx> 

 

If the PIC can handle it, the port can be configured by setting it to 10G.

 

mx> show configuration chassis fpc 4 pic 1 port 0 | display set 

set chassis fpc 4 pic 1 port 0 speed 10g

 

Hope that helps,

--

Trent

 

 

From: NANOG  On Behalf Of Paschal 
Masha
Sent: Thursday, February 24, 2022 16:47
To: nanog 
Subject: 40G QSFP+ to 4 SFP+ on MX960

 

Hello,

 

 

 

Has anyone managed to get the 40G QSFP+ to 4 SFP+ breakout cable to work on the 
2X40GE QSFPP Juniper MICs?

 

Which commands did you use to channelize the port under the "chassis fpc" mode 
to get it to channelize to 4x10g at least for one 40G port on that MIC?

 

My device : MX960.

 

On a side note, 40G modules/ports are a waste from a design perspective.

 

Thanks in advance

 



Regards 
Paschal Masha | Engineering 
Skype ID: paschal.masha 

 

   

 

Re: Russian aligned ASNs?

[richey goldberg]

I don’t think that refusing Russian ASNs will do much to stop any kind of 
attacks.   They are going to attack from botnets that are global so that’s not 
going to stop them.If anything blocking Russian ASNs will stop the flow of 
information going into Russia. I think we’re better off doing what we can 
to take down any machines that are participating in attacks if they live on 
machines that are downstream from you.   One of the biggest issues I face in my 
daily tasks is getting other provers to take down machines.   I’m talking to 
you Microsoft, Amazon, Digital Ocean and the likes…..


-richey

From: NANOG  on behalf of 
William Allen Simpson 
Date: Thursday, February 24, 2022 at 7:41 PM
To: North American Network Operators Group 
Subject: Russian aligned ASNs?
There have been reports of DDoS and new targeted malware attacks.

There were questions in the media about cutting off the Internet.

Apparently some Russian government sites have already cut themselves
off, presumably to avoid counterattacks.

Would it improve Internet health to refuse Russian ASN announcements?

What is our community doing to assist Ukraine against these attacks?

Re: Russian aligned ASNs?

[Joe Greco]

On Thu, Feb 24, 2022 at 05:59:08PM -0800, Seth David Schoen wrote:
> I also imagine (without data) that most DoS attacks continue to be
> performed by botnets, using other people's connections, rather than
> directly by their ultimate perpetrators.  So, the most effective and
> meaningful mitigation would be trying to clean up bots, and prevent
> ongoing bot infections, rather than cutting off suspected or actual
> perpetrators.
> 
> I realize that's much easier said than done!

It is, and it isn't.  There was a time when we mostly all had staffed
abuse desks and took action on complaints.  Some of us still do.  If
we took the security of the Internet seriously, we could at least make
a reasonable effort to develop ways to cope with the growing problems
that are only exacerbated by stuff like the explosive growth of IoT,
and the resulting IoT malware.  But this has to include service
providers giving a damn about what they let their customers spew out
onto the network, and it's been many years since it became clear that
profit margin won out over being a decent netizen.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
"The strain of anti-intellectualism has been a constant thread winding its way
through our political and cultural life, nurtured by the false notion that
democracy means that 'my ignorance is just as good as your knowledge.'"-Asimov

Re: Russian aligned ASNs?

[Seth David Schoen]

I also imagine (without data) that most DoS attacks continue to be
performed by botnets, using other people's connections, rather than
directly by their ultimate perpetrators.  So, the most effective and
meaningful mitigation would be trying to clean up bots, and prevent
ongoing bot infections, rather than cutting off suspected or actual
perpetrators.

I realize that's much easier said than done!

Re: 40G QSFP+ to 4 SFP+ on MX960

[Craig]

40G modules/ports are a waste from a design perspective.

Agree  I have many cards of 40G laying around used them for 6 months and
swapped them out

On Thu, Feb 24, 2022 at 4:47 PM Paschal Masha 
wrote:

> Hello,
>
>
>
> Has anyone managed to get the 40G QSFP+ to 4 SFP+ breakout cable to work
> on the 2X40GE QSFPP Juniper MICs?
>
> Which commands did you use to channelize the port under the "chassis fpc"
> mode to get it to channelize to 4x10g at least for one 40G port on that MIC?
>
> My device : MX960.
>
> On a side note, 40G modules/ports are a waste from a design perspective.
>
> Thanks in advance
>
>
>
> Regards
> Paschal Masha | Engineering
> Skype ID: paschal.masha
>
>
>

Re: Russian aligned ASNs?

[Joe Greco]

On Thu, Feb 24, 2022 at 07:40:54PM -0500, William Allen Simpson wrote:
> Apparently some Russian government sites have already cut themselves
> off, presumably to avoid counterattacks.
> 
> Would it improve Internet health to refuse Russian ASN announcements?
> 
> What is our community doing to assist Ukraine against these attacks?

Keeping the free flow of information going seems to be the best way
to counter a history of isolationist tendencies by authoritarian 
governments and represssive regimes.  Countries that have dabbled
with the idea of firewalls, content filters, alternative DNS or even
network, etc., are given encouragement if you cut them off.

It may be best to focus on things that are less IP-centric and more
of a problem-solving variety.  Running a good Tor node, by any chance?

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
"The strain of anti-intellectualism has been a constant thread winding its way
through our political and cultural life, nurtured by the false notion that
democracy means that 'my ignorance is just as good as your knowledge.'"-Asimov

Re: Russian aligned ASNs?

[Suresh Ramasubramanian]

There are reports of bgp hijacks and ddos targeted at Ukrainian asns watch for 
and mitigate those?

--srs

From: NANOG  on behalf of Tony 
Wicks 
Sent: Friday, February 25, 2022 6:55:23 AM
To: 'William Allen Simpson' 
Cc: 'North American Network Operators Group' 
Subject: RE: Russian aligned ASNs?

I would suggest keeping the free flow of outside information to Russia would be 
the best thing we can do.

-Original Message-


What is our community doing to assist Ukraine against these attacks?

RE: Russian aligned ASNs?

[Tony Wicks]

I would suggest keeping the free flow of outside information to Russia would be 
the best thing we can do.

-Original Message-


What is our community doing to assist Ukraine against these attacks?

Re: Russian aligned ASNs?

[William Herrin]

On Thu, Feb 24, 2022 at 4:42 PM William Allen Simpson
 wrote:
> Would it improve Internet health to refuse Russian ASN announcements?
>
> What is our community doing to assist Ukraine against these attacks?

If we're smart, waiting to see what our respective governments ask of
us so that we don't get in their way.

Regards,
Bill Herrin



--
William Herrin
b...@herrin.us
https://bill.herrin.us/

Russian aligned ASNs?

[William Allen Simpson]

There have been reports of DDoS and new targeted malware attacks.

There were questions in the media about cutting off the Internet.

Apparently some Russian government sites have already cut themselves
off, presumably to avoid counterattacks.

Would it improve Internet health to refuse Russian ASN announcements?

What is our community doing to assist Ukraine against these attacks?

Re: 40G QSFP+ to 4 SFP+ on MX960

[Vincent Bernat]

 ❦ 25 February 2022 00:46 +03, Paschal Masha:

> Has anyone managed to get the 40G QSFP+ to 4 SFP+ breakout cable to work on 
> the 2X40GE QSFPP Juniper MICs? 
>
> Which commands did you use to channelize the port under the "chassis
> fpc" mode to get it to channelize to 4x10g at least for one 40G port
> on that MIC?

That's explained here:
https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/topic-map/port-speed-configuration.html

"set chassis fpc 0 pic 0 port 0 speed 10g" enables the split to 4x10G.
You should get xe-0/0/0:0, xe-0/0/0:1, xe-0/0/0:2 and xe-0/0/0:3. The
"number-of-sub-ports" is not mandatory (at least on MX10003, never tried
on MX960).
-- 
If you tell the truth you don't have to remember anything.
-- Mark Twain

Re: 40G QSFP+ to 4 SFP+ on MX960

[Eric Kuhnke]

I would go as far to say that even if somebody gives you *free* 40G
equipment in the year 2022 you shouldn't use it, because it's a
technological dead-end and becomes a huge bother when you need to interface
with some newly purchased device on the other end of the 40G circuit.

There's a reason why 40G anything is so cheap on eBay and 40G ports are
incredibly rare at the world's major IX points.


On Thu, 24 Feb 2022 at 13:47, Paschal Masha 
wrote:

> Hello,
>
>
>
> Has anyone managed to get the 40G QSFP+ to 4 SFP+ breakout cable to work
> on the 2X40GE QSFPP Juniper MICs?
>
> Which commands did you use to channelize the port under the "chassis fpc"
> mode to get it to channelize to 4x10g at least for one 40G port on that MIC?
>
> My device : MX960.
>
> On a side note, 40G modules/ports are a waste from a design perspective.
>
> Thanks in advance
>
>
>
> Regards
> Paschal Masha | Engineering
> Skype ID: paschal.masha
>
>
>

40G QSFP+ to 4 SFP+ on MX960

[Paschal Masha]

Hello, 



Has anyone managed to get the 40G QSFP+ to 4 SFP+ breakout cable to work on the 
2X40GE QSFPP Juniper MICs? 

Which commands did you use to channelize the port under the "chassis fpc" mode 
to get it to channelize to 4x10g at least for one 40G port on that MIC? 

My device : MX960. 

On a side note, 40G modules/ports are a waste from a design perspective. 

Thanks in advance 



Regards 
Paschal Masha | Engineering 
Skype ID: paschal.masha